Every password was made in the same way with an obscure character and a particular word followed by the site’s name with its vowels replaced by similar-looking numbers.

These weren’t the worst passwords in history (like “123456” and “password”), but they weren’t great, either. Someone clever enough might have cracked one of them in relatively short order. If a no-goodnik had done so and then figured out my system, all of the passwords I used across the Internet would have been vulnerable.

Last year’s Heartbleed, a massive security breach that compromised Internet-user passwords by the millions, was my wake-up call to fortify my password procedures.

I was hardly the only one with weak passwords. It’s a major problem, and fixing it can be a big job.

Thankfully, I was part of the way there because I already used the LastPass password manager. The popular tool helps computer users create strong passwords and keep those passwords safe yet readily accessible.

I had been using LastPass only for storage of my too-weak passwords. After Heartbleed, I began tapping the tool’s terrific password-generating features, as well. I’ve continued doing so to this day.

I like LastPass because it is affordable (free if used on computers, and $12 a year if also used on mobile gadgetry), is Web-centric and therefore platform-agnostic (it works on Macs as well as PCs, Android devices as well as iOS devices) and is compatible with all major desktop browsers (via plug-ins that turn the browsers into secure password vaults).

Because LastPass takes a Web-based approach, it gives me ready access to my passwords anywhere and on any machine — I just have to log in.

When upgrading my password-security procedures after Heartbleed, I had to visit all of my sites to update each of their passwords, which took hours. But LastPass helped me at the instant of password creation by filling in the new-password field. This meant I had a secure password instead of something vulnerable.

Now, when I return to one of those sites, I don’t have to remember its password. LastPass provides it automatically.

But LastPass isn’t perfect. It has an inelegant design, and its automated controls for helping me create passwords don’t always work flawlessly. I had to make multiple attempts on certain sites during my long password-updating slog. Futzing was sometimes required. I got annoyed at times.

And LastPass itself isn’t impervious to security breaches.

Its publisher, also called LastPass, revealed last month that it had detected “suspicious activity” on its own computer system, which led to the discovery that some users’ email addresses, password reminders and encryption elements had been compromised. The company said it was able to block the attack, and a subsequent investigation found no evidence that individual passwords or user accounts had been breached.

The Fairfax, Va., company advised users to change their LastPass master passwords, which are used to retrieve encrypted individual passwords for the users’ other online services or accounts. But it said they don’t need to change individual passwords for all their accounts.

Mark Fawcett, who owns the St. Paul-based Mac Men tech-repair company, said he has used AgileBits’ 1Password for about six years and puts it on all his Apple Macintosh and iOS devices. The product also is available for Android and Windows devices.

“I also recommend it to my clients due to security, ease of use and the fact that they can have all of their passwords with them at all times but only need to memorize one master password to get access to all of their other ones,” Fawcett said.

Patrick Rhone, a St. Paul-based technology consultant, said he uses 1Password “and recommend it to all my clients and friends.”

Mike Evangelist, a Birchwood, Minn., resident who used to work for Apple, agrees that 1Password is “very useful, rock-solid, well integrated. It’s the second thing I install on any new iPhone, iPad or Mac (right after Dropbox).”

Yet another 1Password fan, Adam Best of Minneapolis-based Code42 Software, said he puts the password manager on all his Mac and iOS devices.

“So no matter what app or site I need to use, on any device, anywhere I am, I can access, create and change complex passwords immediately,” said Best, who manages social media for Code42.

Christopher Hertel, a longtime technology-industry worker based in St. Paul, said he prefers KeePass Password Safe.

He notes that KeePass runs on all the mainstream computing platforms along with a more obscure one, Linux, which he uses heavily in his work.

“I use Dropbox to share the password database, which is encrypted with both a password and a key file,” Hertel said. “Even if someone else gets hold of a copy of the database, they have to crack a combined password of over 2K bytes.”

The Associated Press contributed to this report. Find Julio Ojeda-Zapata at ojezap.com.

Julio's Pioneer Press duties include writing, often about tech, and helping manage the paper's website and social media. He also uses virtual-reality cameras and other tech tools to commit journalism. In his spare time, Julio writes for the TidBITS Apple-news site, where he is a contributing editor. See his blog at ojezap.com.

As you comment, please be respectful of other commenters and other viewpoints. Our goal with article comments is to provide a space for civil, informative and constructive conversations. We reserve the right to remove any comment we deem to be defamatory, rude, insulting to others, hateful, off-topic or reckless to the community. See our full terms of use here.

More in News

FRIDLEY, Minn. (AP) — Garrison Keillor looked comfortable on the small stage as he sang Christmas lullabies, told off-color limericks and spun a tale about a lutefisk dinner at the fictitious Lake Wobegon.

NEW YORK (AP) — Penny Marshall, who indelibly starred in the top-rated sitcom "Laverne & Shirley" before becoming the trailblazing director of smash-hit big-screen comedies such as "Big" and "A League of Their Own," has died. She was 75.

The St. Paul City Council recently approved $1 million in Cultural STAR grants to 33 organizations, while tweaking eligibility and reimbursement requirements for the twice-annual awards. The rule changes are intended to help small and mid-sized arts and nonprofit groups have a better shot at scoring or even applying for funding. Funding can range from $5,000 grants to $100,000 or...

The Minnesota Pollution Control Agency said Tuesday it has taken the unusual step of denying denied a permit for a large hog farm proposed for Fillmore County in southeastern Minnesota because of the threat of adding to groundwater nitrate pollution in the geologically porous region. MPCA Commissioner John Linc Stine said at a news conference that he denied the general...

It was supposed to be Lanette Johnson's day off from her job at Best Buy, one she would spend with her then-4-month-old son, Logan. But that day in October 2017, Johnson's manager said her Arlington, Va., store was scheduled for an important visit from corporate. Could Johnson find someone to watch Logan and come in? The day care Logan would...